@twin.org/api-auth-entity-storage-models 0.0.3-next.33 → 0.0.3-next.35

package/dist/es/index.js

@@ -24,4 +24,5 @@ export * from "./models/IAuthenticationComponent.js";
 export * from "./models/IAuthenticationRateActionConfig.js";
 export * from "./models/IAuthenticationRateComponent.js";
 export * from "./models/IAuthenticationUser.js";
+export * from "./models/IAuthenticationUserSecure.js";
 //# sourceMappingURL=index.js.map

package/dist/es/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,cAAc,yCAAyC,CAAC;AACxD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,yCAAyC,CAAC;AACxD,cAAc,iDAAiD,CAAC;AAChE,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,qCAAqC,CAAC;AACpD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2CAA2C,CAAC;AAC1D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,iCAAiC,CAAC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nexport * from \"./models/api/IAdminUserCreateRequest.js\";\nexport * from \"./models/api/IAdminUserGetByIdentityRequest.js\";\nexport * from \"./models/api/IAdminUserGetRequest.js\";\nexport * from \"./models/api/IAdminUserGetResponse.js\";\nexport * from \"./models/api/IAdminUserRemoveRequest.js\";\nexport * from \"./models/api/IAdminUserUpdatePasswordRequest.js\";\nexport * from \"./models/api/IAdminUserUpdateRequest.js\";\nexport * from \"./models/api/IAuditCreateRequest.js\";\nexport * from \"./models/api/IAuditQueryRequest.js\";\nexport * from \"./models/api/IAuditQueryResponse.js\";\nexport * from \"./models/api/ILoginRequest.js\";\nexport * from \"./models/api/ILoginResponse.js\";\nexport * from \"./models/api/ILogoutRequest.js\";\nexport * from \"./models/api/IRefreshTokenRequest.js\";\nexport * from \"./models/api/IRefreshTokenResponse.js\";\nexport * from \"./models/api/IUpdatePasswordRequest.js\";\nexport * from \"./models/authAuditEvent.js\";\nexport * from \"./models/IAuthenticationAdminComponent.js\";\nexport * from \"./models/IAuthenticationAuditComponent.js\";\nexport * from \"./models/IAuthenticationAuditEntry.js\";\nexport * from \"./models/IAuthenticationComponent.js\";\nexport * from \"./models/IAuthenticationRateActionConfig.js\";\nexport * from \"./models/IAuthenticationRateComponent.js\";\nexport * from \"./models/IAuthenticationUser.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,cAAc,yCAAyC,CAAC;AACxD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,yCAAyC,CAAC;AACxD,cAAc,iDAAiD,CAAC;AAChE,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,qCAAqC,CAAC;AACpD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2CAA2C,CAAC;AAC1D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,iCAAiC,CAAC;AAChD,cAAc,uCAAuC,CAAC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nexport * from \"./models/api/IAdminUserCreateRequest.js\";\nexport * from \"./models/api/IAdminUserGetByIdentityRequest.js\";\nexport * from \"./models/api/IAdminUserGetRequest.js\";\nexport * from \"./models/api/IAdminUserGetResponse.js\";\nexport * from \"./models/api/IAdminUserRemoveRequest.js\";\nexport * from \"./models/api/IAdminUserUpdatePasswordRequest.js\";\nexport * from \"./models/api/IAdminUserUpdateRequest.js\";\nexport * from \"./models/api/IAuditCreateRequest.js\";\nexport * from \"./models/api/IAuditQueryRequest.js\";\nexport * from \"./models/api/IAuditQueryResponse.js\";\nexport * from \"./models/api/ILoginRequest.js\";\nexport * from \"./models/api/ILoginResponse.js\";\nexport * from \"./models/api/ILogoutRequest.js\";\nexport * from \"./models/api/IRefreshTokenRequest.js\";\nexport * from \"./models/api/IRefreshTokenResponse.js\";\nexport * from \"./models/api/IUpdatePasswordRequest.js\";\nexport * from \"./models/authAuditEvent.js\";\nexport * from \"./models/IAuthenticationAdminComponent.js\";\nexport * from \"./models/IAuthenticationAuditComponent.js\";\nexport * from \"./models/IAuthenticationAuditEntry.js\";\nexport * from \"./models/IAuthenticationComponent.js\";\nexport * from \"./models/IAuthenticationRateActionConfig.js\";\nexport * from \"./models/IAuthenticationRateComponent.js\";\nexport * from \"./models/IAuthenticationUser.js\";\nexport * from \"./models/IAuthenticationUserSecure.js\";\n"]}

package/dist/es/models/IAuthenticationAdminComponent.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAuthenticationAdminComponent.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationAdminComponent.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IComponent } from \"@twin.org/core\";\nimport type { IAuthenticationUser } from \"./IAuthenticationUser.js\";\n\n/**\n * Contract definition for authentication admin component.\n */\nexport interface IAuthenticationAdminComponent extends IComponent {\n\t/**\n\t * Create a login for the user.\n\t * @param user The user to create.\n\t * @returns Nothing.\n\t */\n\tcreate(user: Omit<IAuthenticationUser, \"salt\">): Promise<void>;\n\n\t/**\n\t * Update a login for the user.\n\t * @param user The user to update.\n\t * @returns Nothing.\n\t */\n\tupdate(user: Partial<Omit<IAuthenticationUser, \"password\" | \"salt\">>): Promise<void>;\n\n\t/**\n\t * Get a user by email.\n\t * @param email The email address of the user to get.\n\t * @returns The user details.\n\t */\n\tget(email: string): Promise<Omit<IAuthenticationUser, \"password\" | \"salt\">>;\n\n\t/**\n\t * Get a user by identity.\n\t * @param identity The identity of the user to get.\n\t * @returns The user details.\n\t */\n\tgetByIdentity(identity: string): Promise<Omit<IAuthenticationUser, \"password\" | \"salt\">>;\n\n\t/**\n\t * Remove a user.\n\t * @param email The email address of the user to remove.\n\t * @returns Nothing.\n\t */\n\tremove(email: string): Promise<void>;\n\n\t/**\n\t * Update the user's password.\n\t * @param email The email address of the user to update.\n\t * @param newPassword The new password for the user.\n\t * @param currentPassword The current password, optional, if supplied will check against existing.\n\t * @returns Nothing.\n\t */\n\tupdatePassword(email: string, newPassword: string, currentPassword?: string): Promise<void>;\n}\n"]}
+{"version":3,"file":"IAuthenticationAdminComponent.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationAdminComponent.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IComponent } from \"@twin.org/core\";\nimport type { IAuthenticationUser } from \"./IAuthenticationUser.js\";\n\n/**\n * Contract definition for authentication admin component.\n */\nexport interface IAuthenticationAdminComponent extends IComponent {\n\t/**\n\t * Create a login for the user.\n\t * @param user The user to create.\n\t * @returns Nothing.\n\t */\n\tcreate(user: IAuthenticationUser & { password: string }): Promise<void>;\n\n\t/**\n\t * Update a login for the user.\n\t * @param user The user to update.\n\t * @returns Nothing.\n\t */\n\tupdate(user: Partial<IAuthenticationUser>): Promise<void>;\n\n\t/**\n\t * Get a user by email.\n\t * @param email The email address of the user to get.\n\t * @returns The user details.\n\t */\n\tget(email: string): Promise<IAuthenticationUser>;\n\n\t/**\n\t * Get a user by identity.\n\t * @param identity The identity of the user to get.\n\t * @returns The user details.\n\t */\n\tgetByIdentity(identity: string): Promise<IAuthenticationUser>;\n\n\t/**\n\t * Remove a user.\n\t * @param email The email address of the user to remove.\n\t * @returns Nothing.\n\t */\n\tremove(email: string): Promise<void>;\n\n\t/**\n\t * Update the user's password.\n\t * @param email The email address of the user to update.\n\t * @param newPassword The new password for the user.\n\t * @param currentPassword The current password, optional, if supplied will check against existing.\n\t * @returns Nothing.\n\t */\n\tupdatePassword(email: string, newPassword: string, currentPassword?: string): Promise<void>;\n}\n"]}

package/dist/es/models/IAuthenticationUser.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAuthenticationUser.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationUser.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Contract definition for authentication user.\n */\nexport interface IAuthenticationUser {\n\t/**\n\t * The user e-mail address.\n\t */\n\temail: string;\n\n\t/**\n\t * The encrypted password for the user.\n\t */\n\tpassword: string;\n\n\t/**\n\t * The salt for the password.\n\t */\n\tsalt: string;\n\n\t/**\n\t * The user identity.\n\t */\n\tuserIdentity: string;\n\n\t/**\n\t * The users organization.\n\t */\n\torganizationIdentity: string;\n\n\t/**\n\t * The scope assigned to the user, comma separated.\n\t */\n\tscope: string[];\n}\n"]}
+{"version":3,"file":"IAuthenticationUser.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationUser.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * Contract definition for authentication user.\n */\nexport interface IAuthenticationUser {\n\t/**\n\t * The user e-mail address.\n\t */\n\temail: string;\n\n\t/**\n\t * The user identity.\n\t */\n\tuserIdentity: string;\n\n\t/**\n\t * The users organization.\n\t */\n\torganizationIdentity: string;\n\n\t/**\n\t * The scope assigned to the user, comma separated.\n\t */\n\tscope: string[];\n}\n"]}

package/dist/es/models/IAuthenticationUserSecure.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=IAuthenticationUserSecure.js.map

package/dist/es/models/IAuthenticationUserSecure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IAuthenticationUserSecure.js","sourceRoot":"","sources":["../../../src/models/IAuthenticationUserSecure.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"./IAuthenticationUser.js\";\n\n/**\n * Contract definition for authentication user.\n */\nexport interface IAuthenticationUserSecure extends IAuthenticationUser {\n\t/**\n\t * The encrypted password for the user.\n\t */\n\tpassword: string;\n\n\t/**\n\t * The salt for the password.\n\t */\n\tsalt: string;\n\n\t/**\n\t * The tenant ID associated with the user, optional in single tenant contexts.\n\t */\n\ttenantId: string;\n}\n"]}

package/dist/es/models/api/IAdminUserCreateRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAdminUserCreateRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserCreateRequest.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"../IAuthenticationUser.js\";\n\n/**\n * Create a new user as an admin.\n */\nexport interface IAdminUserCreateRequest {\n\t/**\n\t * The body of the request.\n\t */\n\tbody: Omit<IAuthenticationUser, \"salt\">;\n}\n"]}
+{"version":3,"file":"IAdminUserCreateRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserCreateRequest.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"../IAuthenticationUser.js\";\n\n/**\n * Create a new user as an admin.\n */\nexport interface IAdminUserCreateRequest {\n\t/**\n\t * The body of the request.\n\t */\n\tbody: IAuthenticationUser & { password: string };\n}\n"]}

package/dist/es/models/api/IAdminUserGetResponse.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAdminUserGetResponse.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserGetResponse.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"../IAuthenticationUser.js\";\n\n/**\n * Get a user as an admin.\n */\nexport interface IAdminUserGetResponse {\n\t/**\n\t * The body of the request.\n\t */\n\tbody: Omit<IAuthenticationUser, \"password\" | \"salt\">;\n}\n"]}
+{"version":3,"file":"IAdminUserGetResponse.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserGetResponse.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"../IAuthenticationUser.js\";\n\n/**\n * Get a user as an admin.\n */\nexport interface IAdminUserGetResponse {\n\t/**\n\t * The body of the request.\n\t */\n\tbody: IAuthenticationUser;\n}\n"]}

package/dist/es/models/api/IAdminUserUpdateRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAdminUserUpdateRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserUpdateRequest.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"../IAuthenticationUser.js\";\n\n/**\n * Update a user as an admin.\n */\nexport interface IAdminUserUpdateRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The user email.\n\t\t */\n\t\temail: string;\n\t};\n\n\t/**\n\t * The body of the request.\n\t */\n\tbody: Partial<Omit<IAuthenticationUser, \"email\" | \"password\" | \"salt\">>;\n}\n"]}
+{"version":3,"file":"IAdminUserUpdateRequest.js","sourceRoot":"","sources":["../../../../src/models/api/IAdminUserUpdateRequest.ts"],"names":[],"mappings":"","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport type { IAuthenticationUser } from \"../IAuthenticationUser.js\";\n\n/**\n * Update a user as an admin.\n */\nexport interface IAdminUserUpdateRequest {\n\t/**\n\t * The path parameters for the request.\n\t */\n\tpathParams: {\n\t\t/**\n\t\t * The user email.\n\t\t */\n\t\temail: string;\n\t};\n\n\t/**\n\t * The body of the request.\n\t */\n\tbody: Partial<Omit<IAuthenticationUser, \"email\">>;\n}\n"]}

package/dist/types/index.d.ts

@@ -22,3 +22,4 @@ export * from "./models/IAuthenticationComponent.js";
 export * from "./models/IAuthenticationRateActionConfig.js";
 export * from "./models/IAuthenticationRateComponent.js";
 export * from "./models/IAuthenticationUser.js";
+export * from "./models/IAuthenticationUserSecure.js";

package/dist/types/models/IAuthenticationAdminComponent.d.ts

@@ -9,25 +9,27 @@ export interface IAuthenticationAdminComponent extends IComponent {
      * @param user The user to create.
      * @returns Nothing.
      */
-    create(user: Omit<IAuthenticationUser, "salt">): Promise<void>;
+    create(user: IAuthenticationUser & {
+        password: string;
+    }): Promise<void>;
     /**
      * Update a login for the user.
      * @param user The user to update.
      * @returns Nothing.
      */
-    update(user: Partial<Omit<IAuthenticationUser, "password" | "salt">>): Promise<void>;
+    update(user: Partial<IAuthenticationUser>): Promise<void>;
     /**
      * Get a user by email.
      * @param email The email address of the user to get.
      * @returns The user details.
      */
-    get(email: string): Promise<Omit<IAuthenticationUser, "password" | "salt">>;
+    get(email: string): Promise<IAuthenticationUser>;
     /**
      * Get a user by identity.
      * @param identity The identity of the user to get.
      * @returns The user details.
      */
-    getByIdentity(identity: string): Promise<Omit<IAuthenticationUser, "password" | "salt">>;
+    getByIdentity(identity: string): Promise<IAuthenticationUser>;
     /**
      * Remove a user.
      * @param email The email address of the user to remove.

package/dist/types/models/IAuthenticationUser.d.ts

@@ -6,14 +6,6 @@ export interface IAuthenticationUser {
      * The user e-mail address.
      */
     email: string;
-    /**
-     * The encrypted password for the user.
-     */
-    password: string;
-    /**
-     * The salt for the password.
-     */
-    salt: string;
     /**
      * The user identity.
      */

package/dist/types/models/IAuthenticationUserSecure.d.ts

@@ -0,0 +1,18 @@
+import type { IAuthenticationUser } from "./IAuthenticationUser.js";
+/**
+ * Contract definition for authentication user.
+ */
+export interface IAuthenticationUserSecure extends IAuthenticationUser {
+    /**
+     * The encrypted password for the user.
+     */
+    password: string;
+    /**
+     * The salt for the password.
+     */
+    salt: string;
+    /**
+     * The tenant ID associated with the user, optional in single tenant contexts.
+     */
+    tenantId: string;
+}

package/dist/types/models/api/IAdminUserCreateRequest.d.ts

@@ -6,5 +6,7 @@ export interface IAdminUserCreateRequest {
     /**
      * The body of the request.
      */
-    body: Omit<IAuthenticationUser, "salt">;
+    body: IAuthenticationUser & {
+        password: string;
+    };
 }

package/dist/types/models/api/IAdminUserGetResponse.d.ts

@@ -6,5 +6,5 @@ export interface IAdminUserGetResponse {
     /**
      * The body of the request.
      */
-    body: Omit<IAuthenticationUser, "password" | "salt">;
+    body: IAuthenticationUser;
 }

package/dist/types/models/api/IAdminUserUpdateRequest.d.ts

@@ -15,5 +15,5 @@ export interface IAdminUserUpdateRequest {
     /**
      * The body of the request.
      */
-    body: Partial<Omit<IAuthenticationUser, "email" | "password" | "salt">>;
+    body: Partial<Omit<IAuthenticationUser, "email">>;
 }

package/docs/changelog.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.0.3-next.35](https://github.com/iotaledger/twin-api/compare/api-auth-entity-storage-models-v0.0.3-next.34...api-auth-entity-storage-models-v0.0.3-next.35) (2026-05-21)
+
+
+### Features
+
+* user partitioning ([#126](https://github.com/iotaledger/twin-api/issues/126)) ([6bf0da3](https://github.com/iotaledger/twin-api/commit/6bf0da3c42406c9838e80e0ddd6b21f5c64aac90))
+
+## [0.0.3-next.34](https://github.com/iotaledger/twin-api/compare/api-auth-entity-storage-models-v0.0.3-next.33...api-auth-entity-storage-models-v0.0.3-next.34) (2026-05-19)
+
+
+### Features
+
+* update dependencies ([32b8cd2](https://github.com/iotaledger/twin-api/commit/32b8cd20353119dd1998e293d54063cf4d9ecc29))
+
 ## [0.0.3-next.33](https://github.com/iotaledger/twin-api/compare/api-auth-entity-storage-models-v0.0.3-next.32...api-auth-entity-storage-models-v0.0.3-next.33) (2026-05-11)
 
 

package/docs/reference/index.md

@@ -9,6 +9,7 @@
 - [IAuthenticationRateActionConfig](interfaces/IAuthenticationRateActionConfig.md)
 - [IAuthenticationRateComponent](interfaces/IAuthenticationRateComponent.md)
 - [IAuthenticationUser](interfaces/IAuthenticationUser.md)
+- [IAuthenticationUserSecure](interfaces/IAuthenticationUserSecure.md)
 - [IAdminUserCreateRequest](interfaces/IAdminUserCreateRequest.md)
 - [IAdminUserGetByIdentityRequest](interfaces/IAdminUserGetByIdentityRequest.md)
 - [IAdminUserGetRequest](interfaces/IAdminUserGetRequest.md)

package/docs/reference/interfaces/IAdminUserCreateRequest.md

@@ -6,6 +6,12 @@ Create a new user as an admin.
 
 ### body {#body}
 
-> **body**: `Omit`\<[`IAuthenticationUser`](IAuthenticationUser.md), `"salt"`\>
+> **body**: [`IAuthenticationUser`](IAuthenticationUser.md) & `object`
 
 The body of the request.
+
+#### Type Declaration
+
+##### password
+
+> **password**: `string`

package/docs/reference/interfaces/IAdminUserGetResponse.md

@@ -6,6 +6,6 @@ Get a user as an admin.
 
 ### body {#body}
 
-> **body**: `Omit`\<[`IAuthenticationUser`](IAuthenticationUser.md), `"password"` \| `"salt"`\>
+> **body**: [`IAuthenticationUser`](IAuthenticationUser.md)
 
 The body of the request.

package/docs/reference/interfaces/IAdminUserUpdateRequest.md

@@ -20,6 +20,6 @@ The user email.
 
 ### body {#body}
 
-> **body**: `Partial`\<`Omit`\<[`IAuthenticationUser`](IAuthenticationUser.md), `"email"` \| `"password"` \| `"salt"`\>\>
+> **body**: `Partial`\<`Omit`\<[`IAuthenticationUser`](IAuthenticationUser.md), `"email"`\>\>
 
 The body of the request.

package/docs/reference/interfaces/IAuthenticationAdminComponent.md

@@ -18,7 +18,7 @@ Create a login for the user.
 
 ##### user
 
-`Omit`\<[`IAuthenticationUser`](IAuthenticationUser.md), `"salt"`\>
+[`IAuthenticationUser`](IAuthenticationUser.md) & `object`
 
 The user to create.
 
@@ -40,7 +40,7 @@ Update a login for the user.
 
 ##### user
 
-`Partial`\<`Omit`\<[`IAuthenticationUser`](IAuthenticationUser.md), `"password"` \| `"salt"`\>\>
+`Partial`\<[`IAuthenticationUser`](IAuthenticationUser.md)\>
 
 The user to update.
 
@@ -54,7 +54,7 @@ Nothing.
 
 ### get() {#get}
 
-> **get**(`email`): `Promise`\<`Omit`\<[`IAuthenticationUser`](IAuthenticationUser.md), `"salt"` \| `"password"`\>\>
+> **get**(`email`): `Promise`\<[`IAuthenticationUser`](IAuthenticationUser.md)\>
 
 Get a user by email.
 
@@ -68,7 +68,7 @@ The email address of the user to get.
 
 #### Returns
 
-`Promise`\<`Omit`\<[`IAuthenticationUser`](IAuthenticationUser.md), `"salt"` \| `"password"`\>\>
+`Promise`\<[`IAuthenticationUser`](IAuthenticationUser.md)\>
 
 The user details.
 
@@ -76,7 +76,7 @@ The user details.
 
 ### getByIdentity() {#getbyidentity}
 
-> **getByIdentity**(`identity`): `Promise`\<`Omit`\<[`IAuthenticationUser`](IAuthenticationUser.md), `"salt"` \| `"password"`\>\>
+> **getByIdentity**(`identity`): `Promise`\<[`IAuthenticationUser`](IAuthenticationUser.md)\>
 
 Get a user by identity.
 
@@ -90,7 +90,7 @@ The identity of the user to get.
 
 #### Returns
 
-`Promise`\<`Omit`\<[`IAuthenticationUser`](IAuthenticationUser.md), `"salt"` \| `"password"`\>\>
+`Promise`\<[`IAuthenticationUser`](IAuthenticationUser.md)\>
 
 The user details.
 

package/docs/reference/interfaces/IAuthenticationUser.md

@@ -2,6 +2,10 @@
 
 Contract definition for authentication user.
 
+## Extended by
+
+- [`IAuthenticationUserSecure`](IAuthenticationUserSecure.md)
+
 ## Properties
 
 ### email {#email}
@@ -12,22 +16,6 @@ The user e-mail address.
 
 ***
 
-### password {#password}
-
-> **password**: `string`
-
-The encrypted password for the user.
-
-***
-
-### salt {#salt}
-
-> **salt**: `string`
-
-The salt for the password.
-
-***
-
 ### userIdentity {#useridentity}
 
 > **userIdentity**: `string`

package/docs/reference/interfaces/IAuthenticationUserSecure.md

@@ -0,0 +1,79 @@
+# Interface: IAuthenticationUserSecure
+
+Contract definition for authentication user.
+
+## Extends
+
+- [`IAuthenticationUser`](IAuthenticationUser.md)
+
+## Properties
+
+### email {#email}
+
+> **email**: `string`
+
+The user e-mail address.
+
+#### Inherited from
+
+[`IAuthenticationUser`](IAuthenticationUser.md).[`email`](IAuthenticationUser.md#email)
+
+***
+
+### userIdentity {#useridentity}
+
+> **userIdentity**: `string`
+
+The user identity.
+
+#### Inherited from
+
+[`IAuthenticationUser`](IAuthenticationUser.md).[`userIdentity`](IAuthenticationUser.md#useridentity)
+
+***
+
+### organizationIdentity {#organizationidentity}
+
+> **organizationIdentity**: `string`
+
+The users organization.
+
+#### Inherited from
+
+[`IAuthenticationUser`](IAuthenticationUser.md).[`organizationIdentity`](IAuthenticationUser.md#organizationidentity)
+
+***
+
+### scope {#scope}
+
+> **scope**: `string`[]
+
+The scope assigned to the user, comma separated.
+
+#### Inherited from
+
+[`IAuthenticationUser`](IAuthenticationUser.md).[`scope`](IAuthenticationUser.md#scope)
+
+***
+
+### password {#password}
+
+> **password**: `string`
+
+The encrypted password for the user.
+
+***
+
+### salt {#salt}
+
+> **salt**: `string`
+
+The salt for the password.
+
+***
+
+### tenantId {#tenantid}
+
+> **tenantId**: `string`
+
+The tenant ID associated with the user, optional in single tenant contexts.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@twin.org/api-auth-entity-storage-models",
-	"version": "0.0.3-next.33",
+	"version": "0.0.3-next.35",
 	"description": "Contracts for authentication flows and admin user management with entity storage.",
 	"repository": {
 		"type": "git",